Kenexa Lms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

KL

Product

Kenexa Lms

by Ibm · last CVE Mar 31, 2017

11

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 4Medium 6Low 1

Severity

All severities11 Critical0 High4 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Kenexa Lms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8932	8.8	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-8931	8.8	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-8930	7.6	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to SQL injection Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-8928	7.6	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to SQL injection Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-8933	6.5	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-5941	5.7	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-8935	5.4	1%	Mar 31	IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0
CVE-2016-8929	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to SQL injection Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-5942	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-5940	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more
CVE-2016-5938	3.3	0%	Feb 1	IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system Affected: 4.1; 4.2; 4.2.2; 4.2.3; 4.2.4; 5.0; +2 more